diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index db8f8e673c..516e68c2c6 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -226,7 +226,7 @@ dependencies {
     implementation("androidx.work:work-rxjava2:$workVersion")
     implementation("androidx.swiperefreshlayout:swiperefreshlayout:1.2.0")
     implementation("com.google.android.flexbox:flexbox:3.0.0")
-    implementation("com.github.bitfireAT:dav4jvm:2.1.3") {
+    implementation("com.github.bitfireAT:dav4jvm:4.0.1") {
         exclude(group = "org.ogce", module = "xpp3") // Android comes with its own XmlPullParser
     }
     implementation("org.conscrypt:conscrypt-android:2.6.3")
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 2ebe711fe9..98d1771dfd 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -335,7 +335,10 @@
             <trusting group="org.jetbrains.intellij.deps"/>
             <trusting group="org.jetbrains.kotlinx"/>
          </trusted-key>
-         <trusted-key id="8E3A02905A1AE67E7B0F9ACD3967D4EDA591B991" group="org.jetbrains.kotlinx" name="kotlinx-html-jvm" version="0.8.1"/>
+         <trusted-key id="8E3A02905A1AE67E7B0F9ACD3967D4EDA591B991">
+            <trusting group="io.ktor"/>
+            <trusting group="org.jetbrains.kotlinx" name="kotlinx-html-jvm" version="0.8.1"/>
+         </trusted-key>
          <trusted-key id="8F9A3C6D105B9F57844A721D79E193516BE7998F">
             <trusting group="org.dom4j" name="dom4j" version="2.1.4"/>
             <trusting group="org.dom4j" name="dom4j" version="2.2.0"/>
@@ -19694,6 +19697,14 @@
             <sha256 value="977a16e0c70ee01139463fd4cbd9efd7d7a767c0c8b3e72941b69cbdd2f085d3" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="com.github.bitfireAT" name="dav4jvm" version="4.0.1">
+         <artifact name="dav4jvm-4.0.1.jar">
+            <sha256 value="2eb911cf9b8bb4d99b63175746f64e58a476190d9260c23f4532d88afc066455" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+         <artifact name="dav4jvm-4.0.1.module">
+            <sha256 value="193f621daced909bc6818caa38300b771b52ff0512b28602f8fe42da178da586" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.github.blikoon" name="QRCodeScanner" version="0.1.2">
          <artifact name="QRCodeScanner-0.1.2.aar">
             <sha256 value="be2f333f2739761358f032ac86c0120deb2c93c92a8ac619cce912aef20e2b79" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -22704,6 +22715,11 @@
             <sha256 value="58a3357303069a21930e7b9fe9b864de8bfb8bd4607433dbe48263459620cffc" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.google.guava" name="guava" version="33.6.0-jre">
+         <artifact name="guava-33.6.0-android.jar">
+            <sha256 value="9532ca9ba8aceb4cd2067171f981c799988b7f5844e3e274811a3bb757034bc4" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.google.guava" name="guava-parent" version="26.0-android">
          <artifact name="guava-parent-26.0-android.pom">
             <sha256 value="f8698ab46ca996ce889c1afc8ca4f25eb8ac6b034dc898d4583742360016cc04" origin="Generated by Gradle"/>